Re: [strongSwan] Nokia VPN Client & IKEv2

2009-12-21 Thread Robert Markula
Hi Simo, sberg...@cc.hut.fi wrote: > Hi, > > It has been a while since I tested Nokia VPN with S60 3.1 phone, but > back then I was able to get it work. > > In this kind of situation, there are few steps I would do: > First I would download the latest versions of the Nokia mobile VPN > clien

Re: [strongSwan] newer strongswan juniper interoperability

2009-12-21 Thread Marc Giger
Hello Andreas, Hmmm... It works perfectly with strongswan 2.8.0... I looked into the logfile of the juniper fw and it just says that it reached the # retries... On Mon, 21 Dec 2009 18:59:51 +0100 Andreas Steffen wrote: > Hello Marc, > > probably your Juniper box never receives message MI3 be

Re: [strongSwan] newer strongswan juniper interoperability

2009-12-21 Thread Andreas Steffen
Hello Marc, probably your Juniper box never receives message MI3 because the rather large certificate causes IP fragmentation of the IKE UDP datagram and the fragments get discarded either by a router or a firewall. Or your Juniper box has some other problems and does not send a corresponding noti

Re: [strongSwan] newer strongswan juniper interoperability

2009-12-21 Thread Marc Giger
Andreas, Your tip works...but Dec 21 17:41:17 mgi pluto[11806]: | state object #1 found, in STATE_MAIN_I2 Dec 21 17:41:17 mgi pluto[11806]: "roadwarrior" #1: ignoring CERT_NONE certificate request payload

Re: [strongSwan] newer strongswan juniper interoperability

2009-12-21 Thread Marc Giger
Hi Andreas, I will try your tip. I don't know which proposal was choosen by the juniper fw. But the following list seems to be what's supported: pre-g1-des-md5 Preshare1 DES/MD5 28800 pre-g1-des-sha Preshare1 DES/SHA 28800 pre-g2-des-md5

Re: [strongSwan] Nokia VPN Client & IKEv2

2009-12-21 Thread sbergman
Hi, It has been a while since I tested Nokia VPN with S60 3.1 phone, but back then I was able to get it work. In this kind of situation, there are few steps I would do: First I would download the latest versions of the Nokia mobile VPN client and the policy tool from: http://europe.nokia.com